create-principles-disciple 1.81.0 → 1.83.0

package/core/dist/runtime-v2/diagnostician-prompt-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostician-prompt-builder.js","sourceRoot":"","sources":["../../src/runtime-v2/diagnostician-prompt-builder.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAiDxE,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,sBAAsB,EAAE,EAAE;IAC1B,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,MAAM;CACf,CAAC;AAeX;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kCAAkC,CAChD,UAA+B,IAAI,0BAA0B,EAAE,EAC/D,SAAkB,2BAA2B;IAE7C,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAExD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CP,OAAO;;;;;;;EAOP,WAAW,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,0BAA0B;IACpB,OAAO,CAAsB;IAC7B,MAAM,CAAU;IAEjC,YACE,UAA+B,IAAI,0BAA0B,EAAE,EAC/D,SAAkB,2BAA2B;QAE7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,WAAW,CACT,OAAoC,EACpC,SAA8B,6BAA6B;QAE3D,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,2EAA2E;QAC3E,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACrD,kBAAkB,CAAC,IAAI,CACrB,qCAAqC,SAAS,CAAC,MAAM,OAAO,MAAM,CAAC,sBAAsB,UAAU,CACpG,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACrD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;oBACL,GAAG,KAAK;oBACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,gBAAgB;iBACvE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,cAAc,GAAgC;YAClD,GAAG,OAAO;YACV,kBAAkB;SACnB,CAAC;QAEF,MAAM,qBAAqB,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5F,wDAAwD;QACxD,MAAM,WAAW,GAAgB;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,kBAAkB;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,cAAc;YACvB,qBAAqB;YACrB,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,wEAAwE;QACxE,qFAAqF;QACrF,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE1C,0EAA0E;QAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;YACxD,MAAM,WAAW,GAAG,qBAAqB,CAAC;YAC1C,gEAAgE;YAChE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;YACrE,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBAC3D,qFAAqF,CAAC;YACxF,WAAW,CAAC,qBAAqB,GAAG,oBAAoB,CAAC;YACzD,WAAW,CAAC,kBAAkB,GAAG;gBAC/B,GAAG,kBAAkB;gBACrB,gDAAgD,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC,eAAe,GAAG;aAC9F,CAAC;YACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;CACF"}
+{"version":3,"file":"diagnostician-prompt-builder.js","sourceRoot":"","sources":["../../src/runtime-v2/diagnostician-prompt-builder.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAiDjE,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,sBAAsB,EAAE,EAAE;IAC1B,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,MAAM;CACf,CAAC;AAeX;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kCAAkC,CAChD,UAA+B,IAAI,0BAA0B,EAAE,EAC/D,SAAkB,2BAA2B,EAC7C,cAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAEjE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CP,OAAO;;;;;;;EAOP,WAAW,GAAG,iBAAiB,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,0BAA0B;IACpB,OAAO,CAAsB;IAC7B,MAAM,CAAU;IAEjC,YACE,UAA+B,IAAI,0BAA0B,EAAE,EAC/D,SAAkB,2BAA2B;QAE7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,WAAW,CACT,OAAoC,EACpC,SAA8B,6BAA6B,EAC3D,cAA+B;QAE/B,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,2EAA2E;QAC3E,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACrD,kBAAkB,CAAC,IAAI,CACrB,qCAAqC,SAAS,CAAC,MAAM,OAAO,MAAM,CAAC,sBAAsB,UAAU,CACpG,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACrD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;oBACL,GAAG,KAAK;oBACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,gBAAgB;iBACvE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,cAAc,GAAgC;YAClD,GAAG,OAAO;YACV,kBAAkB;SACnB,CAAC;QAEF,MAAM,qBAAqB,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAE5G,wDAAwD;QACxD,MAAM,WAAW,GAAgB;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,kBAAkB;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,cAAc;YACvB,qBAAqB;YACrB,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,wEAAwE;QACxE,qFAAqF;QACrF,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE1C,0EAA0E;QAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;YACxD,MAAM,WAAW,GAAG,qBAAqB,CAAC;YAC1C,gEAAgE;YAChE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;YACrE,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBAC3D,qFAAqF,CAAC;YACxF,WAAW,CAAC,qBAAqB,GAAG,oBAAoB,CAAC;YACzD,WAAW,CAAC,kBAAkB,GAAG;gBAC/B,GAAG,kBAAkB;gBACrB,gDAAgD,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC,eAAe,GAAG;aAC9F,CAAC;YACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;CACF"}

package/core/dist/runtime-v2/evidence-sanitizer.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Shared evidence sanitizer for durable pain signal storage.
+ *
+ * Used by:
+ * - pain-signal-observability.ts (core package)
+ * - message-sanitize.ts (openclaw-plugin package)
+ *
+ * Design contract (EP-08 Security Boundary Placement):
+ * - Sanitization happens at the PERSISTENCE boundary, not at evaluation boundary
+ * - Enforcement input (raw params, error text) stays available for gate/score computation
+ * - All strings are token-redacted and bounded before durable storage
+ * - Unknown-first: never throws on malformed input; returns {} or bounded preview
+ * - Recursive with depth/key/array limits to prevent infinite traversal
+ *
+ * ERR checklist:
+ * - ERR-001: no `as` casts — input is `unknown`, narrowed with typeof guards
+ * - ERR-055: ANY-segment sensitive field matching, not ALL-segment
+ * - ERR-056: token redaction runs on ALL strings, not just truncation
+ * - ERR-051: redaction is at persistence output path, not evaluation input path
+ * - EP-08: platform-agnostic path basename — uses split on both `\\` and `/`,
+ *   never relies on nodePath.basename which only splits on the host OS separator.
+ */
+export declare const MAX_EVIDENCE_VALUE_CHARS = 200;
+/**
+ * Converges a single absolute path to a safe representation.
+ * - Under workspaceDir → repo-relative
+ * - Other absolute → basename only (platform-agnostic)
+ * - Relative paths → kept as-is
+ */
+export declare function convergePath(value: string, workspaceDir?: string): string;
+/**
+ * Sanitize a single string value:
+ * 1. Strip internal PD tags
+ * 2. Redact token-like patterns
+ * 3. Replace absolute paths embedded in the string
+ * 4. Bound length
+ */
+export declare function sanitizeString(value: string, workspaceDir?: string): string;
+/**
+ * Recursively sanitize any value for durable evidence storage.
+ * - Primitives: string → redact+bound; number/boolean → pass-through
+ * - Objects: recurse with key limit
+ * - Arrays: recurse with item limit
+ * - Depth limit prevents infinite traversal
+ *
+ * ERR-001: input is `unknown`, narrowed with typeof guards (no `as` casts)
+ */
+export declare function sanitizeValue(value: unknown, depth?: number, workspaceDir?: string): unknown;
+/**
+ * Sanitize tool-call params for evidence/trajectory storage.
+ *
+ * ERR-001: accepts `unknown`, not `Record<string, unknown>`. Runtime guards only.
+ * ERR-055: ANY-segment sensitive field matching.
+ * ERR-056: token redaction runs on ALL strings via sanitizeValue recursion.
+ */
+export declare function sanitizeToolParams(params: unknown, workspaceDir?: string): Record<string, unknown>;
+//# sourceMappingURL=evidence-sanitizer.d.ts.map

package/core/dist/runtime-v2/evidence-sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-sanitizer.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/evidence-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAuD5C;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAmBzE;AAqBD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAyB3E;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,KAAK,SAAI,EACT,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CA+BT;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,OAAO,EACf,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8BzB"}

package/core/dist/runtime-v2/evidence-sanitizer.js

@@ -0,0 +1,213 @@
+/**
+ * Shared evidence sanitizer for durable pain signal storage.
+ *
+ * Used by:
+ * - pain-signal-observability.ts (core package)
+ * - message-sanitize.ts (openclaw-plugin package)
+ *
+ * Design contract (EP-08 Security Boundary Placement):
+ * - Sanitization happens at the PERSISTENCE boundary, not at evaluation boundary
+ * - Enforcement input (raw params, error text) stays available for gate/score computation
+ * - All strings are token-redacted and bounded before durable storage
+ * - Unknown-first: never throws on malformed input; returns {} or bounded preview
+ * - Recursive with depth/key/array limits to prevent infinite traversal
+ *
+ * ERR checklist:
+ * - ERR-001: no `as` casts — input is `unknown`, narrowed with typeof guards
+ * - ERR-055: ANY-segment sensitive field matching, not ALL-segment
+ * - ERR-056: token redaction runs on ALL strings, not just truncation
+ * - ERR-051: redaction is at persistence output path, not evaluation input path
+ * - EP-08: platform-agnostic path basename — uses split on both `\\` and `/`,
+ *   never relies on nodePath.basename which only splits on the host OS separator.
+ */
+// ── Limits ──
+export const MAX_EVIDENCE_VALUE_CHARS = 200;
+const MAX_DEPTH = 4;
+const MAX_KEYS = 50;
+const MAX_ARRAY_ITEMS = 20;
+// ── Token patterns ──
+const TOKEN_LIKE_PATTERNS = [
+    /[A-Za-z0-9+/=]{40,}/g,
+    /sk-[A-Za-z0-9_-]{20,}/g,
+    /ghp_[A-Za-z0-9]{36,}/g,
+    /gho_[A-Za-z0-9]{36,}/g,
+    /xox[bpras]-[A-Za-z0-9-]{20,}/g,
+    /eyJ[A-Za-z0-9_-]{20,}\./g,
+];
+// ── PD tag patterns ──
+const PD_TAG_PATTERNS = [
+    /\[EMOTIONAL_DAMAGE_DETECTED(?::(?:mild|moderate|severe))?\]/gi,
+    /\[EMPATHY_ROLLBACK_REQUEST\]/gi,
+    /<empathy[^>]*\/?>(?:<\/empathy>)?/gi,
+];
+// ── Path detection ──
+const ABSOLUTE_PATH_RE = /^(?:[A-Za-z]:[\\/]|\/|\\\\)/;
+const WINDOWS_DRIVE_RE = /^[A-Za-z]:\\/;
+/**
+ * Matches absolute paths embedded anywhere inside a string.
+ * Windows drive, POSIX root, UNC paths.
+ */
+const ABSOLUTE_PATH_IN_STRING_RE = /(?:^|[\s"'=])([A-Za-z]:\\[^\s"'&|<>]+|[A-Za-z]:\/[^\s"'&|<>]+|\\\\[^\s"'&|<>]+|(?:\/[\w.-]+){2,}(?:\/[^\s"'&|<>]*)?)/gm;
+// ── Helpers ──
+function isPlainRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Platform-agnostic basename that handles both `\` and `/` separators.
+ *
+ * EP-08: nodePath.basename on Linux does not split on backslash.
+ * This helper splits on both separator families so that Windows paths
+ * like `D:\Code\principles` produce `principles` even when running on
+ * a POSIX CI runner.
+ */
+function platformAgnosticBasename(p) {
+    const parts = p.split(/[\\/]/);
+    return parts[parts.length - 1] || p;
+}
+/**
+ * Converges a single absolute path to a safe representation.
+ * - Under workspaceDir → repo-relative
+ * - Other absolute → basename only (platform-agnostic)
+ * - Relative paths → kept as-is
+ */
+export function convergePath(value, workspaceDir) {
+    if (!ABSOLUTE_PATH_RE.test(value))
+        return value;
+    // Try repo-relative
+    if (workspaceDir) {
+        const normalizedWorkspace = workspaceDir.replace(/[\\/]+$/, '');
+        const normalizedValue = value.replace(/[\\/]+$/, '');
+        // Case-insensitive comparison on Windows
+        const compare = WINDOWS_DRIVE_RE.test(value)
+            ? (a, b) => a.toLowerCase() === b.toLowerCase()
+            : (a, b) => a === b;
+        if (compare(normalizedValue.slice(0, normalizedWorkspace.length), normalizedWorkspace)) {
+            const relative = normalizedValue.slice(normalizedWorkspace.length).replace(/^[/\\]/, '');
+            return relative || platformAgnosticBasename(value);
+        }
+    }
+    // Absolute, not under workspace → basename
+    return platformAgnosticBasename(value);
+}
+/**
+ * Replace absolute paths embedded inside a longer string.
+ * e.g. "cd D:\Code\principles && git status" → "cd <path:principles> && git status"
+ * e.g. "error in /home/user/project/src/file.ts" → "error in <path:file.ts>"
+ */
+function replacePathsInString(value, workspaceDir) {
+    return value.replace(ABSOLUTE_PATH_IN_STRING_RE, (fullMatch, capturedPath) => {
+        const leading = fullMatch.slice(0, fullMatch.length - capturedPath.length);
+        const converged = convergePath(capturedPath, workspaceDir);
+        // Wrap outside-workspace absolute paths in angle brackets
+        if (ABSOLUTE_PATH_RE.test(capturedPath) && converged === platformAgnosticBasename(capturedPath)) {
+            return `${leading}<path:${converged}>`;
+        }
+        return `${leading}${converged}`;
+    });
+}
+// ── String sanitization ──
+/**
+ * Sanitize a single string value:
+ * 1. Strip internal PD tags
+ * 2. Redact token-like patterns
+ * 3. Replace absolute paths embedded in the string
+ * 4. Bound length
+ */
+export function sanitizeString(value, workspaceDir) {
+    let result = value;
+    // 1. Strip PD tags
+    for (const p of PD_TAG_PATTERNS) {
+        result = result.replace(p, '');
+    }
+    // 2. Redact tokens
+    for (const pattern of TOKEN_LIKE_PATTERNS) {
+        result = result.replace(pattern, (match) => {
+            const prefix = match.length > 50 ? match.slice(0, 8) : match.slice(0, 4);
+            return `${prefix}___REDACTED___${match.length}`;
+        });
+    }
+    // 3. Replace absolute paths embedded in the string
+    result = replacePathsInString(result, workspaceDir);
+    // 4. Bound length
+    if (result.length > MAX_EVIDENCE_VALUE_CHARS) {
+        result = result.slice(0, MAX_EVIDENCE_VALUE_CHARS) + '___TRUNCATED___';
+    }
+    return result.trim();
+}
+// ── Recursive value sanitization ──
+/**
+ * Recursively sanitize any value for durable evidence storage.
+ * - Primitives: string → redact+bound; number/boolean → pass-through
+ * - Objects: recurse with key limit
+ * - Arrays: recurse with item limit
+ * - Depth limit prevents infinite traversal
+ *
+ * ERR-001: input is `unknown`, narrowed with typeof guards (no `as` casts)
+ */
+export function sanitizeValue(value, depth = 0, workspaceDir) {
+    if (depth > MAX_DEPTH)
+        return '<max-depth>';
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value === 'string')
+        return sanitizeString(value, workspaceDir);
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (Array.isArray(value)) {
+        const items = value.slice(0, MAX_ARRAY_ITEMS);
+        const mapped = items.map((item) => sanitizeValue(item, depth + 1, workspaceDir));
+        if (value.length > MAX_ARRAY_ITEMS) {
+            mapped.push(`<${value.length - MAX_ARRAY_ITEMS} more items>`);
+        }
+        return mapped;
+    }
+    // ERR-001: runtime guard instead of `as Record`
+    if (isPlainRecord(value)) {
+        const result = {};
+        let count = 0;
+        for (const [k, v] of Object.entries(value)) {
+            if (count >= MAX_KEYS) {
+                result['<truncated>'] = `${Object.keys(value).length - count} more keys`;
+                break;
+            }
+            result[k] = sanitizeValue(v, depth + 1, workspaceDir);
+            count++;
+        }
+        return result;
+    }
+    return '<unsupported-type>';
+}
+/**
+ * Sanitize tool-call params for evidence/trajectory storage.
+ *
+ * ERR-001: accepts `unknown`, not `Record<string, unknown>`. Runtime guards only.
+ * ERR-055: ANY-segment sensitive field matching.
+ * ERR-056: token redaction runs on ALL strings via sanitizeValue recursion.
+ */
+export function sanitizeToolParams(params, workspaceDir) {
+    if (params === null || params === undefined) {
+        return {};
+    }
+    if (typeof params === 'string') {
+        return { '<string-input>': sanitizeString(params.slice(0, MAX_EVIDENCE_VALUE_CHARS), workspaceDir) };
+    }
+    if (typeof params === 'number' || typeof params === 'boolean') {
+        return {};
+    }
+    if (Array.isArray(params)) {
+        const sanitized = sanitizeValue(params, 0, workspaceDir);
+        if (Array.isArray(sanitized)) {
+            return { '<array-input>': sanitized.join(', ').slice(0, MAX_EVIDENCE_VALUE_CHARS) };
+        }
+        return { '<array-input>': '<sanitization-error>' };
+    }
+    if (isPlainRecord(params)) {
+        const sanitized = sanitizeValue(params, 0, workspaceDir);
+        if (isPlainRecord(sanitized)) {
+            return sanitized;
+        }
+        return {};
+    }
+    return {};
+}
+//# sourceMappingURL=evidence-sanitizer.js.map

package/core/dist/runtime-v2/evidence-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-sanitizer.js","sourceRoot":"","sources":["../../src/runtime-v2/evidence-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAe;AAEf,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,uBAAuB;AAEvB,MAAM,mBAAmB,GAAa;IACpC,sBAAsB;IACtB,wBAAwB;IACxB,uBAAuB;IACvB,uBAAuB;IACvB,+BAA+B;IAC/B,0BAA0B;CAC3B,CAAC;AAEF,wBAAwB;AAExB,MAAM,eAAe,GAAa;IAChC,+DAA+D;IAC/D,gCAAgC;IAChC,qCAAqC;CACtC,CAAC;AAEF,uBAAuB;AAEvB,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC;;;GAGG;AACH,MAAM,0BAA0B,GAC9B,wHAAwH,CAAC;AAE3H,gBAAgB;AAEhB,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,CAAS;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,YAAqB;IAC/D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,oBAAoB;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrD,yCAAyC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1C,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE;YAC/D,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzF,OAAO,QAAQ,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAa,EAAE,YAAqB;IAChE,OAAO,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,SAAS,EAAE,YAAoB,EAAE,EAAE;QACnF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,0DAA0D;QAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,SAAS,KAAK,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;YAChG,OAAO,GAAG,OAAO,SAAS,SAAS,GAAG,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4BAA4B;AAE5B;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,YAAqB;IACjE,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,mBAAmB;IACnB,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO,GAAG,MAAM,iBAAiB,KAAK,CAAC,MAAM,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEpD,kBAAkB;IAClB,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,GAAG,iBAAiB,CAAC;IACzE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,qCAAqC;AAErC;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAK,GAAG,CAAC,EACT,YAAqB;IAErB,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,cAAc,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gDAAgD;IAChD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,MAAM,CAAC,aAAa,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,YAAY,CAAC;gBACzE,MAAM;YACR,CAAC;YACD,MAAM,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;YACtD,KAAK,EAAE,CAAC;QACV,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAe,EACf,YAAqB;IAErB,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,gBAAgB,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,EAAE,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/core/dist/runtime-v2/evidence-triage/__tests__/admission-events.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Admission Events Tests — PEAT-B2
+ *
+ * Tests for admission event creation, serialization, and privacy validation.
+ */
+export {};
+//# sourceMappingURL=admission-events.test.d.ts.map

package/core/dist/runtime-v2/evidence-triage/__tests__/admission-events.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-events.test.d.ts","sourceRoot":"","sources":["../../../../src/runtime-v2/evidence-triage/__tests__/admission-events.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/core/dist/runtime-v2/evidence-triage/__tests__/admission-events.test.js

@@ -0,0 +1,170 @@
+/**
+ * Admission Events Tests — PEAT-B2
+ *
+ * Tests for admission event creation, serialization, and privacy validation.
+ */
+import { describe, it, expect } from 'vitest';
+import { createAdmissionDecisionEvent, createDiagnosisTaskCreatedEvent, createEvidenceOnlyRecordedEvent, createSkippedRefusedEvent, serializeAdmissionEvent, validateEventPrivacy, } from '../admission-events.js';
+// ── Fixtures ────────────────────────────────────────────────────────────────
+function makeDecision(overrides = {}) {
+    return {
+        outcome: 'evidence_only',
+        reason: 'Tool failure is infrastructure noise.',
+        nextAction: 'store_as_evidence',
+        sourceKind: 'tool_failure',
+        triageDecision: 'evidence_only',
+        shouldCreateDiagnosticTask: false,
+        decidedAt: '2026-06-08T12:00:00.000Z',
+        ...overrides,
+    };
+}
+// ── Admission Decision Event ────────────────────────────────────────────────
+describe('createAdmissionDecisionEvent', () => {
+    it('creates event with all required fields', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, {
+            workspaceRef: 'my-workspace',
+            sessionId: 'session-123',
+        });
+        expect(event.eventType).toBe('admission_decision');
+        expect(event.eventId).toMatch(/^adm_\d+_\d+$/);
+        expect(event.timestamp).toBe('2026-06-08T12:00:00.000Z');
+        expect(event.sourceKind).toBe('tool_failure');
+        expect(event.workspaceRef).toBe('my-workspace');
+        expect(event.sessionId).toBe('session-123');
+        expect(event.triageDecision).toBe('evidence_only');
+        expect(event.triggerOutcome).toBe('evidence_only');
+        expect(event.reason).toBeTruthy();
+        expect(event.nextAction).toBeTruthy();
+        expect(event.shouldCreateDiagnosticTask).toBe(false);
+    });
+    it('records diagnosis_created outcome correctly', () => {
+        const decision = makeDecision({
+            outcome: 'diagnosis_created',
+            triageDecision: 'admit',
+            shouldCreateDiagnosticTask: true,
+            reason: 'Owner reported.',
+        });
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws' });
+        expect(event.triggerOutcome).toBe('diagnosis_created');
+        expect(event.shouldCreateDiagnosticTask).toBe(true);
+    });
+});
+// ── Diagnosis Task Created Event ────────────────────────────────────────────
+describe('createDiagnosisTaskCreatedEvent', () => {
+    it('creates event with pain ID and task ID', () => {
+        const decision = makeDecision({
+            outcome: 'diagnosis_created',
+            triageDecision: 'admit',
+            shouldCreateDiagnosticTask: true,
+        });
+        const event = createDiagnosisTaskCreatedEvent({
+            painId: 'pain_123',
+            taskId: 'diag_456',
+            decision,
+            workspaceRef: 'ws',
+        });
+        expect(event.eventType).toBe('diagnosis_task_created');
+        expect(event.painId).toBe('pain_123');
+        expect(event.taskId).toBe('diag_456');
+        expect(event.triggerOutcome).toBe('diagnosis_created');
+    });
+});
+// ── Evidence Only Recorded Event ────────────────────────────────────────────
+describe('createEvidenceOnlyRecordedEvent', () => {
+    it('creates event with triage decision details', () => {
+        const decision = makeDecision();
+        const event = createEvidenceOnlyRecordedEvent(decision, {
+            workspaceRef: 'ws',
+            sessionId: 's1',
+        });
+        expect(event.eventType).toBe('evidence_only_recorded');
+        expect(event.triageDecision).toBe('evidence_only');
+        expect(event.reason).toBe(decision.reason);
+        expect(event.nextAction).toBe(decision.nextAction);
+    });
+});
+// ── Skipped Refused Event ───────────────────────────────────────────────────
+describe('createSkippedRefusedEvent', () => {
+    it('creates event for refused decisions', () => {
+        const decision = makeDecision({
+            outcome: 'refused',
+            reason: 'Input validation failed.',
+            nextAction: 'fix_input_and_retry',
+        });
+        const event = createSkippedRefusedEvent(decision, { workspaceRef: 'ws' });
+        expect(event.eventType).toBe('skipped_refused');
+        expect(event.triggerOutcome).toBe('refused');
+        expect(event.reason).toContain('validation');
+    });
+    it('creates event for cooldown-skipped decisions', () => {
+        const decision = makeDecision({
+            outcome: 'cooldown_skipped',
+            reason: 'Cooldown is active.',
+            nextAction: 'wait_for_cooldown',
+        });
+        const event = createSkippedRefusedEvent(decision, { workspaceRef: 'ws' });
+        expect(event.eventType).toBe('skipped_refused');
+        expect(event.triggerOutcome).toBe('cooldown_skipped');
+    });
+});
+// ── Serialization ───────────────────────────────────────────────────────────
+describe('serializeAdmissionEvent', () => {
+    it('produces valid JSON', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws' });
+        const serialized = serializeAdmissionEvent(event);
+        expect(() => JSON.parse(serialized)).not.toThrow();
+    });
+    it('includes eventType in serialized output', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws' });
+        const serialized = serializeAdmissionEvent(event);
+        const parsed = JSON.parse(serialized);
+        expect(parsed.eventType).toBe('admission_decision');
+    });
+    it('does not include unexpected fields', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws' });
+        const serialized = serializeAdmissionEvent(event);
+        const parsed = JSON.parse(serialized);
+        // Should not have arbitrary extra keys
+        const expectedKeys = ['eventType', 'eventId', 'timestamp', 'sourceKind', 'workspaceRef', 'sessionId',
+            'triageDecision', 'triggerOutcome', 'reason', 'nextAction', 'shouldCreateDiagnosticTask'];
+        const actualKeys = Object.keys(parsed);
+        for (const key of actualKeys) {
+            expect(expectedKeys).toContain(key);
+        }
+    });
+});
+// ── Privacy Validation ──────────────────────────────────────────────────────
+describe('validateEventPrivacy', () => {
+    it('passes for clean events', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws' });
+        const result = validateEventPrivacy(event);
+        expect(result.valid).toBe(true);
+        expect(result.violations).toHaveLength(0);
+    });
+    it('detects API keys in events', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'ws', sessionId: 'sk-1234567890abcdef1234567890abcdef1234' });
+        const result = validateEventPrivacy(event);
+        expect(result.valid).toBe(false);
+        expect(result.violations).toContain('potential_api_key_detected');
+    });
+    it('detects Windows absolute paths', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'C:\\Users\\admin\\workspace' });
+        const result = validateEventPrivacy(event);
+        expect(result.valid).toBe(false);
+        expect(result.violations).toContain('absolute_windows_path_detected');
+    });
+    it('allows workspace directory names without full paths', () => {
+        const decision = makeDecision();
+        const event = createAdmissionDecisionEvent(decision, { workspaceRef: 'my-project' });
+        const result = validateEventPrivacy(event);
+        expect(result.valid).toBe(true);
+    });
+});
+//# sourceMappingURL=admission-events.test.js.map

package/core/dist/runtime-v2/evidence-triage/__tests__/admission-events.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-events.test.js","sourceRoot":"","sources":["../../../../src/runtime-v2/evidence-triage/__tests__/admission-events.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAGhC,+EAA+E;AAE/E,SAAS,YAAY,CAAC,YAAsC,EAAE;IAC5D,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,uCAAuC;QAC/C,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,cAAc;QAC1B,cAAc,EAAE,eAAe;QAC/B,0BAA0B,EAAE,KAAK;QACjC,SAAS,EAAE,0BAA0B;QACrC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE;YACnD,YAAY,EAAE,cAAc;YAC5B,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,OAAO;YACvB,0BAA0B,EAAE,IAAI;YAChC,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7E,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,OAAO;YACvB,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,+BAA+B,CAAC;YAC5C,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,UAAU;YAClB,QAAQ;YACR,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,+BAA+B,CAAC,QAAQ,EAAE;YACtD,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,qBAAqB;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,qBAAqB;YAC7B,UAAU,EAAE,mBAAmB;SAChC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,uCAAuC;QACvC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW;YAClG,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACnI,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/core/dist/runtime-v2/evidence-triage/__tests__/source-descriptors.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Source Descriptors Tests — PEAT-B1
+ *
+ * Direct tests for the source descriptor registry.
+ * This module defines the declarative policy mapping from SourceKind to default TriageDecision.
+ *
+ * Tests verify:
+ * - All source kinds have descriptors registered
+ * - Every descriptor has required fields (kind, defaultDecision, reason, nextAction, canUpgrade)
+ * - Descriptor invariants (owner_reported always admit, tool_failure never admit, etc.)
+ * - canUpgrade flag is correctly set for upgradable kinds
+ *
+ * ERR checklist:
+ * - ERR-002: Every descriptor carries reason + nextAction
+ * - ERR-005: Descriptors are data, not assumptions about callers
+ */
+export {};
+//# sourceMappingURL=source-descriptors.test.d.ts.map

package/core/dist/runtime-v2/evidence-triage/__tests__/source-descriptors.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-descriptors.test.d.ts","sourceRoot":"","sources":["../../../../src/runtime-v2/evidence-triage/__tests__/source-descriptors.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}